Privacy Policy

Trusty Law is operated by TrustyCap Technologies, Inc. This policy explains what we collect, why we collect it, who we share it with, how long we keep it, and how you remove it. It covers gettrustylaw.com, app.gettrustylaw.com, and the Trusty Law apps for iPhone, iPad, and Android.

Trusty Law is an independent product. It is not affiliated with, endorsed by, or operated by U.S. Citizenship and Immigration Services or any other government agency.

Account and sign in information:

• Your email address, and a display name if you set one.
• How you sign in. If you use a one time email code, we store the code only until it is used or expires. If you sign in with Google or Apple, we store the account identifier they give us, not your password.
• Session records, so you stay signed in. These are stored as rotating hashed tokens and can be revoked.

What you put into your workspace:

• Documents you upload, such as notices and letters, and the information our reader extracts from them.
• Case records you create: receipt numbers, dates, status history, notices, calls, service requests, reminders, checklists, labels for people in your household, and your own notes.
• Questions you ask Trusty Guide, and the answers it gives.
• Your language preference and app settings.

Official case status:

• The status information USCIS returns for a receipt number you entered, kept exactly as it was published, with the date we received it.

Technical and billing information:

• Standard technical logs: IP address, device and browser type, and error reports, used to keep the service running and to prevent abuse.
• Subscription status and payment records from our payment providers. We never receive or store your full card number.
• Product analytics limited to a fixed list of event names and short category values, for example that a document was uploaded. These never include receipt numbers, names, addresses, notes, document contents, or any fact about your case.

What we never ask for and never collect:

• Your immigration status. There is no field for it anywhere in the product, and we do not infer it.
• Your Social Security number, or biometric information such as fingerprints or face scans.
• Your device location or GPS data.
• Your contacts, your calendar, your microphone, or your health or genetic information.
• The password to your myUSCIS account, your USPS account, or any other government account. We do not scrape government websites.

• To run the service: keep your workspace, explain official updates, organize your documents and dates, and prepare materials you ask for.
• To look up official case status with the receipt numbers you enter.
• To send you messages you asked for, such as sign in codes, reminders you set, and notifications you turn on.
• To handle your subscription and payments.
• To keep the service secure, prevent abuse, and meet our legal obligations.
• To improve the product, using only the limited analytics described above.

We do not use your information for advertising, and we do not build advertising profiles.

Documents are stored in private storage. They are never given a public link. They can be opened only through an authorized request from your signed in account, or through a share link you create yourself.

When you ask us to read a document, we send it to our AI provider so it can extract fields such as a notice date or a form number. The result is shown to you for confirmation before it becomes part of your record. You can correct it or reject it. Deleting a document deletes the stored file and the information extracted from it.

Trusty Law uses Anthropic as its AI provider, to explain official information in plain language, to read documents you upload, and to help organize what you have recorded. Anthropic processes that content only to return a result to us, and is not permitted to use it to train models.

Official data is owned by ordinary code, not by a model. Case status, receipt and form identifiers, dates, and history are recorded and stored by deterministic code. A model can explain what official information means. It cannot create, change, or overwrite it. Official text and our explanation of it are always stored and displayed separately, so you can see which is which.

Receipt numbers are masked before a model ever sees them. A model receives the prefix and the last three characters, not the full number.

We share information only with the providers that make Trusty Law work. Each is bound by contract to protect your information, to use it only to provide their service to us, and to follow protections at least as strong as this policy.

• Cloudflare, Inc. Hosting, the application and API runtime, document storage, and email delivery.
• Neon, Inc. The managed database that stores your records.
• Anthropic, PBC. The AI models that explain official information and read documents.
• U.S. Citizenship and Immigration Services. We send a receipt number you entered in order to retrieve the official status of that case. We send nothing else. We never send your name, your documents, or your notes.
• Stripe, Inc. Payments made on the web.
• Apple Inc. and Google LLC. Purchases made inside the iPhone, iPad, or Android apps, and the delivery of push notifications if you turn them on.

We may also disclose information if valid legal process requires it, and we will tell you when we are lawfully allowed to.

No third party may use or disclose your information for its own purposes without your active consent. This includes information in de-identified, anonymized, or pseudonymized form.

We do not sell your personal information, for money or for anything else of value. We do not share it for cross context behavioral advertising. We have never done either, and this policy would have to change before we could.

Nothing you create is shared automatically. Sharing happens only when you create a Review Packet share link. Before the link exists, you choose what it contains, how long it lasts, and whether it needs a password.

• Links last up to 30 days and expire on their own.
• You can revoke any link immediately, and you can see when it was opened.
• You can redact person labels and mask receipt numbers in the packet before you share it. Your stored records are not changed by redaction.

Please think about other people before you share. A packet can contain information about your family and household, such as who is related to whom and which cases are filed together. Sharing it shares their information too, and they may not expect that. Once a person opens a link, they have seen what it contained, and revoking the link afterward does not undo that. Share the smallest packet that does the job, and only with someone you chose.

• Information is encrypted in transit using HTTPS.
• Stored information is encrypted at rest. Sensitive narrative content, document contents, packet contents, and person labels carry an additional layer of AES-256-GCM encryption applied by the application, using a versioned format that supports key rotation.
• Documents live in private storage with no public links, reachable only through an authorized request.
• The database role the application uses can read and write data but cannot change the database structure.
• Sign in sessions use rotating hashed tokens that can be revoked.
• Access to systems is limited to the people who need it, and administrative actions are recorded in an audit log.

If a breach affects your information, we will notify you, and we will tell you what happened, what it means for you, and the steps you can take.

• Your account and the records in it are kept for as long as your account is open, because a case can run for years and the history is the point.
• We do not delete a dormant account automatically. If you stop using Trusty Law, your records stay available to you until you delete them or close your account.
• Unfinished sensitive intake information that you have not touched for 30 days is erased automatically, and after 7 days in workspaces set to a stricter privacy mode.
• A Review Packet is erased 72 hours after you download it.
• Some records carry a stricter retention setting. That setting can only become stricter, never looser.
• Limited technical logs and analytics events, which contain no case information, are kept on a short rolling basis for security and reliability.
• After you delete an account, an audit entry records that a deletion happened. It contains no personal or case information.

• Choose what to put in. Trusty Law is useful with very little, and more useful with more. That trade is yours to make.
• Choose what to share, with whom, for how long, and revoke it.
• Turn notifications on or off.
• Export at any time.
• Delete a single document, a single record, or your whole account.

California residents have the right to know what personal information we hold, to get a copy of it, to correct it, and to have it deleted. The tools above provide all of this directly in the product, and you can also write to hello@gettrustylaw.com. We do not sell or share personal information as those terms are used in the California Consumer Privacy Act. We will never treat you differently for exercising a privacy right.

Trusty Law is built for adults and accounts require you to be at least 18. It is not directed to children under 13, and we do not knowingly collect information from them. If you believe a child has given us information, write to hello@gettrustylaw.com and we will delete it.

If TrustyCap Technologies, Inc. is acquired, merges, or ends its business, we will tell you before your information moves, and we will say who the new operator is.

The new operator must honor this policy for information collected under it. If it will not, you will be given the choice to download your information, move it elsewhere, or have it securely deleted before the transfer happens.

If we change this policy in a way that matters to you, we will email the address on your account and show a notice in the app before the change takes effect. The notice will include a plain language summary of exactly what changed.

Where a change means we would handle information you already gave us in a materially different way, we will ask you to agree to it first, and you can decline and export or delete your data instead. The effective date at the top of this page always shows the version in force.

TrustyCap Technologies, Inc. Privacy questions and requests go to hello@gettrustylaw.com.